Senior Cloud Security Engineer (f/m/d)

Company Description

At Enpal, we are pursuing the dream of building the largest renewable community in Europe. How do we make that happen? Enpal finally simplifies providing solar energy: We rent out solar systems, electricity storage, and wall boxes at an all-inclusive rate, supplemented by a favorable green electricity tariff; all intelligently connected to form an integrated overall solution. True to the motto "digital, decentralized, and 100% renewable", our heart beats both for the rapid development of a company and for combating the greatest challenge of our generation - climate change.

Job Description

We are looking for a Senior Cloud Security Engineer (f/m/d) to join our team. The candidate should have extensive experience in cloud security, a deep understanding of cloud platforms, and a proven ability to implement and manage security measures. You will be responsible for ensuring the security and integrity of our cloud-based systems and data.

We offer speed, agility, and steep career growth. Our vision to make sustainable solar energy available to everyone can only come to live through our customer and product-oriented view, and the cooperation between software development, product management and lean, experiment-driven business development.

Join us to develop your professional skills, take part in the energy revolution, and let us take ownership of the sustainable change we want to see in the world together! We are looking forward to your application.

At Enpal, you would be

· designing, implementing, and managing cloud security solutions. We are serious about delivering incremental value in each iteration, and we celebrate when we improve people's experience with our solution, make an impact towards our climate goals.

· adopting Shift-Left and Zero-Trust approaches. We emphasize proactive and continuous security measures, helping us stay ahead of potential threats and ensuring robust protection of assets, applications and services.

· collaborating with cross-functional teams to integrate security best practices into all aspects of cloud operations.

· conducting Threat Modeling & Risk Assessment: Lead threat modeling sessions, drive secure design and code reviews, and perform application-level risk assessments.

· implementing continuous monitoring: Monitor and respond to security incidents and threats.

· enforcing security policies, procedures, and guardrails: Define, maintain, and enforce secure standards, guidelines, and reusable security patterns across development and infrastructure teams.

Qualifications

We are looking for roughly a 50% fit with for what we ask. The other 50% is a surprise to us, it is the magic you bring to the table and the diversity in which you make us grow.

· you have minimum of 5 years of experience in cloud security engineering

· you have understanding of Cloud Control Matrix and shared responsibility models in public clouds.

· you have experience with MITRE Cloud and Kubernetes Threat Matrixes

· you have knowledge of cloud computing platforms architecture and design patterns; Azure is a plus.

· you have hands-on proficiency in cloud native security tools and technologies (e.g., security groups, private endpoints, managed firewalls, cloud vpn gateways, PaaS security controls).

· you have knowledge of Non-Human Identity (NHI) management and Microsoft Identity Platform capabilities

· you have experience with hardening cloud native workloads and orchestrators

· you have experience with security tooling and automation across domains like CNAPP, CWPP etc.

· you are familiar with DevSecOps practices and tools

· you have relevant certifications, CCSP, CCSK, CKS, Azure Security are plus

· you are familiar with information security frameworks, standards and policies

· you communicate clearly in English, spoken and written. Crisp and concise ways of formulating your ideas and opinions. Knowledge of German is a plus.

· you are inspired by the energy transition and want to make a difference. We are one of the biggest players in the solar business and want to make this change with you.

· you want to participate in a company where empowerment and initiative is valued. We are looking for people who want to grow their personal skills and knowledge, take responsibility, steer and influence for what they feel is right.

· agile and lean values are embodied by you. People over processes. Code over documentation. Reducing waste by building minimum viable products first, testing it with real users, growing and maintaining solutions as requirements evolve.

Additional Information

• Work in Germany's first green unicorn and actively shape the solar energy revolution. 

• The sun shines all over the world - at Enpal you will find a highly motivated and diverse team with more than 65 different nationalities. 

• Would you rather keep your pet company at home or your colleagues at the office? Even after the pandemic, we offer you a hybrid working model 

• We fulfill every start-up cliché - in our modern office in Berlin-Friedrichshain, you'll find everything your heart desires, from a ping-pong table and yoga corner to a roof terrace and stocked drinks fridges. 

• Your kick-start at Enpal - Get to know the company, your team colleagues and our founder Mario on your onboarding day. 

• Stay up to date - Whether it's company figures at our monthly all-hands meetings or how a photovoltaic system works at the Lunch & Learn, you'll always know exactly what's going on. 

• Energy transition only works together - At Enpal, you can expect a legendary team spirit and unforgettable team events. 

• No mistakes, no progress - We live a strong feedback culture and grow with your input, either personally or anonymously via our feedback tool Culture Amp.